Overview

overview

8

Static

static

6

3af6cc4eab...5e.apk

android-9-x86

1

fuhao.apk

android-9-x86

8

fuhao.apk

android-10-x64

8

fuhao.apk

android-11-x64

8

Analysis

  • max time kernel
    2876533s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fuhao.apk

  • Size

    5.4MB

  • MD5

    b501049a72c11b599fbf85c2235c381e

  • SHA1

    8723d9318b2fa434881c098888f059608f196cc0

  • SHA256

    835d8bdc3113734412323bf303b5d0fc446c46100feafdbc810231acaf5640df

  • SHA512

    36b6746195a3748711b827fbc74e4015c9f3f227c526f24effe83482f58df17508e326d000b79bc59a4a2a59fc66fa9393179588a87b8222888b5205caa48106

  • SSDEEP

    98304:TiemKK2HxAwVjWckaHDJ8zpedWYEYq3e189NMS8UUQjr99gZJQQeWk:OuRxCckgQedCRc89Nr8Ajr7QHe3

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • com.fhzjh.cmge
    1⤵
    • Requests cell location
    PID:4247

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.fhzjh.cmge/databases/douwan_sdk_db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit

  • /data/data/com.fhzjh.cmge/databases/douwan_sdk_db-journal
    Filesize

    512B

    MD5

    50442e1885790ef4d6ab0b86137136b3

    SHA1

    cf136c2c2b23d1e5df049edb2ee887b403b32297

    SHA256

    0f01688a3681921a816bbe47e44ba1c1dd489024ea3935cc9fc66b0b0d96aba8

    SHA512

    d0d37c5ce2ab84aa3165c5b3871532bf6552ec0efc5dfa738640f6603c0b88a8eae82bb4f6728a357b6778c092e4323c65668b6e7910ddca19164a8af03c32a1

    Download Submit

  • /data/data/com.fhzjh.cmge/databases/douwan_sdk_db-wal
    Filesize

    32KB

    MD5

    157d1dfda5b49b374f38697f40ef0b4f

    SHA1

    c58a363dcd0f2d405c6afe3fb2a2b5bc402655b1

    SHA256

    9b1145a975aabbfe0518cb4b2bf8bcd769251262a880e121e4cf1c8e91da4c17

    SHA512

    d32165e247a23d0ed46fe2aadb048cabbfebdd7289e29340762b478ac50923ca3f29e7aa3bb44f1a4bcec3cff3fadb81e40e7b437099ff2cd1ab45daae6c0fb1

    Download Submit

  • /storage/emulated/0/Android/data/code/DQ.DAT
    Filesize

    58B

    MD5

    a77192acedae46c912e4db3efb8b1cde

    SHA1

    97aa1aa00fb3665a9c8ce9354290fe149ae12a94

    SHA256

    8ead202bea235bb2cccccfe9461907396f1fb72530d8f725aa23e6976f27e91c

    SHA512

    c2f2c8060113af632a34c1bf507eab37ce112ef14827c260a36a76251de041b04159c6cb2175de2c9f565351842bae3c7d52c3cc5f36f89ce3c473be25df3fc5

    Download Submit

  • /storage/emulated/0/Android/data/code/com.fhzjh.cmge/DID.DAT
    Filesize

    32B

    MD5

    35796be840b968e7719d0b9487d59ec6

    SHA1

    9665a26fcc8b0294234cd4088bf6c989ac94d4ba

    SHA256

    72434b7e4367334b378f229d051d462e51c628fba22730f8826149f4af5d5fc9

    SHA512

    50844b89200225522706780a683a1d9be986b4293368a5af9e15f03d57580e705693d7cf83c6d6b0036d4744c643184129feeaddfc9421afcea2312f02c24b0e

    Download Submit